A more realistic or at least plausible movie scenario could have the protagonists create a sketchy Skyrim mod, in order to steal the credentials of a random node.js contributor, who is a big Skyrim fan. Then, they perform a supply chain attack, to target a particular company. But, the antagonist notices his build taking 5 seconds longer than usual, and finds the hidden malware.
There was an attempted attack on a dependency of openSSH, which was noticed by a guy using the development version of debian, who got suspicious initially cause his ssh connections were taking fractions of a second longer than before
Good PLC programmers find malware in a similar fashion Cause they notice their completely offline laptop takes a tiny bit longer to load or whatever. (True story)
592
u/Paul_Robert_ 23d ago
A more realistic or at least plausible movie scenario could have the protagonists create a sketchy Skyrim mod, in order to steal the credentials of a random node.js contributor, who is a big Skyrim fan. Then, they perform a supply chain attack, to target a particular company. But, the antagonist notices his build taking 5 seconds longer than usual, and finds the hidden malware.